yyqdbngt opened a new pull request, #2400: URL: https://github.com/apache/rocketmq-dashboard/pull/2400
## Summary - cap the in-memory username tracker at 10,000 entries - reclaim expired failure windows and locks before admitting a new key - keep active lock entries intact when the tracker is at capacity ## Why Failed attempts below the lock threshold remain in the map indefinitely. Requests using unbounded unique usernames can therefore grow authentication state until the process runs out of memory. ## Tests - `mvn -q -f server/pom.xml -Dtest=LoginRateLimiterTest test` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
